Composer cachethq/cachet has 6 known advisories in the phpwarden feed. Feed 2026.10.28.3, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2023-43661 | Cachet vulnerable to Authenticated Remote Code Execution | critical | 9.1 | <2.4 | 2.4 |
| CVE-2021-39172 | Cachet vulnerable to new line injection during configuration edition | high | 8.8 | <2.5.1 | 2.5.1 |
| CVE-2021-39165 | Unauthenticated SQL Injection in Cachet | high | 8.1 | <=2.3.18 | – |
| CVE-2021-39174 | Cachet configuration leak | high | 8.8 | <2.5.1 | 2.5.1 |
| CVE-2021-39173 | Cachet vulnerable to forced reinstall | high | 8.8 | <2.5.1 | 2.5.1 |
| CVE-2026-113712 | Cachet has Stored XSS in Incident Component | medium | 0.0 | <=2.4.1 | – |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked